VPN will encrypt your communications between your local PC/phone/device and the VPN server you connect to. After that, the data packet transits just as if you’re anywhere else. So if they can crack that encryption, your data is still open. They might not know where the packet came from, but if you are talking PII, that’s not really important. (Does it really matter what IP you had when you tell them your health history and name? Or full banking info?)